OpenID Connect Oauth 中的重定向 url 和回调 uri 有什么区别？

Question

我试图学习如何在我的一个 Android 应用程序中实现 openID 连接，我遇到了两个术语 redirect url 和 callback uri，我无法区分两者。具体有什么区别？

Answer 1

官方术语是“重定向端点”，参见：https://www.rfc-editor.org/rfc/rfc6749#section-3.1.2:

3.1.2. Redirection Endpoint

After completing its interaction with the resource owner, the
authorization server directs the resource owner's user-agent back to
the client. The authorization server redirects the user-agent to the client's redirection endpoint previously established with the
authorization server during the client registration process or when
making the authorization request.

The redirection endpoint URI MUST be an absolute URI as defined by [RFC3986] Section 4.3. The endpoint URI MAY include an
"application/x-www-form-urlencoded" formatted (per Appendix B) query
component ([RFC3986] Section 3.4), which MUST be retained when adding additional query parameters. The endpoint URI MUST NOT include a
fragment component.

但其他术语如“重定向 URI”、“重定向 URL”、“重定向 URI”、“重定向 URL”、“回调 URL”和“回调 URI”等等都可以互换使用，有些是因为在协议字段中术语被缩短为 redirect_uri，其他是因为从 pre-date OAuth 2.0.

的类似协议继承了遗留术语。